Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 19 Jul 2009 16:25:50 +0200
From:      "Simon L. Nielsen" <simon@FreeBSD.org>
To:        John Hay <jhay@meraka.org.za>
Cc:        hubs@freebsd.org
Subject:   Re: cvsup-master.freebsd.org ipv6 limits
Message-ID:  <20090719142550.GC1164@arthur.nitro.dk>
In-Reply-To: <20090701080110.GA51364@zibbi.meraka.csir.co.za>
References:  <20090701080110.GA51364@zibbi.meraka.csir.co.za>

next in thread | previous in thread | raw e-mail | index | archive | help
On 2009.07.01 10:01:10 +0200, John Hay wrote:

> Are the limits for ipv6 cvsup access to cvsup-master.freebsd.org
> different from ipv4 access? I have been using ipv6 to access
> cvsup-master.freebsd.org from cvsup.za.freebsd.org, but lately I have
> seen a lot more "Rejected by server: Access limit exceeded; try again
> later" in its logs.

cvsupd does not support IPv6 natively, so IPv6 access works by making
nc(1) proxy the IPv6 TCP connection to an localhost IPv4 connection.
This means that all IPv6 connections are seen as comming from
localhost.

Looking at the config it actually seems like we only allow one IPv6
connection at the time since we allow from from each IP... There
probably just hasn't been enough IPv6 connections for anyone to notice
before.  I tried bumping the number of IPv6 (localhost) connections to
5.

Could you check if this has fixed the problem?

Oh, and I just noticed that some of the internal FreeBSD.org syncs
seems to have started using IPv6 - that means there is at least an
IPv6 connection every 30 minute to collide with.

-- 
Simon L. Nielsen



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20090719142550.GC1164>